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DETAILED ACTION 



2 



3 



Drawings 



4 



5 



The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(5) 



6 because they do not include the following reference sign(s) mentioned in the 

7 description: (150) and (31 1). Corrected drawing sheets in compliance with 37 CFR 

8 1 .121 (d) are required in reply to the Office action to avoid abandonment of the 

9 application. 



1 1 because they include the following reference character(s) not mentioned in the 

12 description: (130). Corrected drawing sheets in compliance with 37 CFR 1.121(d), or 

1 3 amendment to the specification to add the reference character(s) in the description in 

14 compliance with 37 CFR 1.121(b) are required in reply to the Office action to avoid 

15 abandonment of the application. 

1 6 Any amended replacement drawing sheet should include all of the figures 

17 appearing on the immediate prior version of the sheet, even if only one figure is being 

1 8 amended. Each drawing sheet submitted after the filing date of an application must be 

1 9 labeled in the top margin as either "Replacement Sheet" or "New Sheet" pursuant to 37 

20 CFR 1 . 1 21 (d). If the changes are not accepted by the examiner, the applicant will be 

21 notified and informed of any required corrective action in the next Office action. The 

22 objection to the drawings will not be held in abeyance. 



10 



The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(5) 
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1 Specification 

2 

3 The specification is objected to as failing to provide proper antecedent basis for 

4 the claimed subject matter. See 37 CFR 1.75(d)(1) and MPEP § 608.01 (o). Correction 

5 of the following is required: Claims 38 and 39 contain the limitations wherein the 

6 confirmation sent from the second computer system is encrypted in such a way that its 

7 decryption by the second computer system is infeasible/impossible. There is a lack of 

8 antecedent basis for these limitations as claimed. 
9 

10 



1 1 Allowable Subject Matter 

12 

13 Claims 1 - 12 are allowed. 

14 The following is a statement of reasons for the indication of allowable subject 

15 matter: 

16 Regarding claim 1 , what is claimed is a data processing system for discerning 

1 7 corruption of an electronic ballot. 

18 In a first aspect, the system as claimed comprises the sending of an encrypted 

19 ballot and a validity proof (a proof showing that the ballot is valid), from a voter 

20 computer system to a vote collection center computer system. The vote collection 

21 center computer system receives the encrypted ballot and validity proof, verifies the 

22 validity proof, and if the ballot is valid, generates an encrypted vote confirmation without 
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1 decrypting the encrypted ballot, and sends the vote confirmation to the voter computer 

2 system. The voter computer system receives the encrypted vote confirmation, decrypts 

3 the confirmation, and displays the confirmation to the user. 

4 In a second aspect, the system as claimed further comprises a confirmation 

5 dictionary in the user's possession, which is used to translate the vote confirmation 

6 received from the vote collection computer system to the ballot choice selected by the 

7 voter. If the vote confirmation received by the voter computer system does not equal an 
( 8 entry in the confirmation dictionary indicating the voter's ballot choice, then the voter 

9 can determine that the ballot had been corrupted. 

10 Examiner points out that the "confirmation dictionary" does not have an accepted 

1 1 meaning in the art. As shown by the applicant, the claimed confirmation dictionary 

12 includes at least a data structure (i.e. table) containing a plurality of values each 

13 corresponding to a possible ballot choice, and containing one value equaling the 

14 received vote confirmation only if the ballot had not been corrupted. The claimed 

15 confirmation dictionary is unique per voter, generated by the vote collection computer 

16 system using random and independent values, secret to and uniquely generated by the 

17 vote collection computer system for each voter. Further, the claimed confirmation 

18 dictionary is distributed by the vote collection computer system to each voter (Instant 

19 Application, page 6, lines 1-4; page 7, lines 1-8; page 10, line 29 -page 11, line 2; page 

20 14, lines 1-3; page 18, lines 17-19). 

21 Prior Art teaches or suggests elements of the first aspect of the claimed 

22 invention. Namely the sending of encrypted ballots and ballot validity proofs and the 
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1 generating of a type of vote confirmation that may be used by the voter to confirm that a 

2 vote has been correctly received and/or counted by an electronic voting system (Kilian 

3 et al. - "Secure Electronic Voting Using Partially Compatible Homomorphisms" (U.S. 

4 Patent, 5,495,532), Fujioka et al. - "Electronic Voting Method and System and 

5 Recording Medium Having Recorded Thereon a Program for Implementing the Method" 

6 (U.S. Patent 6,845,447 B1), Cranor - "Electronic Voting", Cramer et al. - "A Secure and 

7 Optimally Efficient Multi-Authority Election Scheme", Cramer et al. - "Multi-Authority 

8 Secret-Ballot Elections with Linear Work", and Borrell et al. - "An Implementable Secure 

9 Voting Scheme"). However, the Prior Art does not teach or suggest the combination of 

10 the first and second aspects of the invention as claimed, including the confirmation 

11 dictionary. 
12 

13 Regarding claims 2-11, they are dependent upon and further limit claim 1 . 

14 

15 Regarding claim 12, it is substantially similar to claim 1, being content on a 

16 computer readable medium that performs the functions indicated by the method claim 1 , 

1 7 and is allowable for the same reasons. 
18 

19 Claims 31 and 36 are objected to as being dependent upon a rejected base 

20 claim, but would be allowable if rewritten in independent form including all of the 

21 limitations of the base claim and any intervening claims. 
22 
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1 

2 

3 Claim Rejections - 35 USC § 101 

4 

5 35 U.S.C. 101 reads as follows: 

6 Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 

7 matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 

8 conditions and requirements of this title. 
9 

10 Claims 24 - 28, and 34 - 36 are rejected under 35 U.S.C. 101 because the 

1 1 claimed invention is directed to non-statutory subject matter. 

12 

13 Regarding claim 24, it is addressed to memories storing "secrets". The 



14 "secrets" are non-functional descriptive material, directed to data, perse. The secrets 

15 do not constitute data structures, since there are no claimed functional interrelationship 

16 between data elements. 
17 



18 Regarding claim 25 - 28, they are addressed to memories containing a ballot, 

19 proof of validity, and a ballot confirmation. Such are non-functional descriptive material, 

20 directed to data, per se. Such stored data does not constitute a data structure. 
21 

22 Claims 34 -36 are directed towards data signals and thus are rejected as not 

23 being tangible. 
24 



Application/Control Number: 10/038,752 Page 7 



Art Unit: 2137 

1 To expedite a complete examination of the instant application, it is presumed that 

2 the claims rejected under 35 USC § 101 above will be amended so as to place them 

3 within a statutory category. 
4 

5 Claim Rejections - 35 USC § 103 

6 

7 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

8 obviousness rejections set forth in this Office action: 

9 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

1 0 forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 

1 1 the prior art are such that the subject matter as a whole would have been obvious at the time the 

1 2 invention was made to a person having ordinary skill in the art to which said subject matter pertains. 

1 3 Patentability shall not be negatived by the manner in which the invention was made. 
14 

15 Claims 13 - 30, 32 - 35, and 37 - 50 are rejected under 35 U.S.C. 103(a) as 

16 being unpatentable over Cramer et al., "A Secure and Optimally Efficient Multi- 

17 Authority Election Scheme". 

18 

19 Regarding claim 13, Cramer et al. discloses: 

20 using a secret maintained in the voting node to encrypt a ballot value selected by 

21 a voter; sending the encrypted ballot value to a vote collection point (Cramer et al., page 

22 1 , par. 3 - page 2, par. 3); 

23 Cramer et al. discloses the generating from the encrypted ballot (and other 

24 encrypted ballots) an election tally - "vote confirmation" - (Cramer et al., page 2, lines 1- 

25 21; page 7, par. 1), which would be published to the participants and observers of the 

26 electronic voting system (Cramer et al., page 9, pars. 3, 4). Voters can then reference 
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1 the published encrypted ballots of the system bulletin board so as to compute the tally 

2 and compare the computed result to the published confirmation result. The 

3 correspondence between the computed tally from the bulletin board and the published 

4 tally from the vote collection system expresses the confirmation to the voter that his/her 

5 vote has or has not been corrupted. For example, a voter may access his posted ballot, 

6 use it to compute the election tally, and compare the results. If the computed tally 

7 equaled the posted tally, then voter' can be assured that his vote, at least, was not 

8 corrupted (Cramer et al., page 2, lines 1-21). Cramer et al. does not disclose that the 

9 vote confirmation has been encrypted by the vote collection system and decrypted by 

10 the voter computer system using a secret. 

1 1 Cramer et al., however, disclose that the electronic voting system bulletin board 

12 is used by participants to send messages. Participants - not observers - can post 

1 3 messages to their assigned area of the bulletin board. In order to verify posted 

14 messages, the public key infrastructure and, specifically, digital signatures (encryption 

1 5 with the private key) is used (Cramer et al., page 2, par. 2; page 4, pars. 3,4). 

16 It would have been obvious to one of ordinary skill in the art to employ the 

1 7 encryption and decryption of the vote confirmation with the electronic voting system of 

1 8 Cramer et al. The vote collection system would digitally sign (encrypt with a private key) 

1 9 and post the vote confirmation, and the voter computer system would access and verify 

20 (decrypt with the publicly available public key) the vote confirmation. This would have 

21 been obvious because one of ordinary skill in the art would have been motivated to 

22 enable public verifiability of posted messages using the public key infrastructure (i.e. 
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1 digital signatures) as taught by Cramer et al., and thereby allow voters to confirm that 

2 the vote confirmation was in fact computed by the vote collection computer. 
3 

4 Regarding claim 14, the modification of Cramer et al., discloses: 

5 further comprising before displaying the decrypted vote confirmation, using a 

6 hash function to transform the decrypted vote confirmation into a smaller hash output 

7 value (Cramer et al., page 6-7, sect. 2.4). 
8 

9 Regarding claim 15, the modification of Cramer et al., discloses: 

1 0 wherein encrypting the ballot value comprises generating an EIGamal pair 

1 1 representing the ballot value (Cramer et al., page 5). 
12 

13 . Regarding claim 16, the modification of Cramer et al., discloses: 

1 4 wherein the EIGamal pair is generated by evaluating the expressions gr° and h° + 



15 m , where p is prime', g IZ P , which has prime multiplicative order q f with the property 

1 6 that q is a multiplicity 1 divisor ofp~1; he {L} ; a cZq is chosen randomly at the voting 

17 node; and m is the ballot value (Cramer et al., page 4, 5, sects. 2.2, 2.3). 
18 

19 Regarding claim 17, the modification of Cramer et al., discloses: 

20 wherein the EIGamal pair is generated by evaluating the expressions ag and 

21 orfr+m , where g and h are both elements of an elliptic curve group, e , of prime order q 
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1 and aeZq is chosen randomly at the voting node, and m is the ballot value (Cramer et 

2 al., page 4, 5, sects. 2,2, 2.3). 
3 

4 Regarding claim 1 8, the modification of Cramer et al., discloses: 

5 determining the ballot value corresponding to the encrypted ballot value received 

6 at the vote collection point by evaluating the expression W/Ui al , where a, is the secret 

7 maintained in the voting node, and W t and U t together comprise the encrypted vote 

8 confirmation; and comparing the determined ballot value to the ballot value selected by 

9 the voter (Cramer et al., page 5-6, sect 2.3; page 7-8, sect. 2.6). 
10 



1 1 Regarding claim 1 9, the modification of Cramer et al., discloses: 

1 2 sending to the vote collection point a validity proof proving thai the encrypted 

1 3 ballot value corresponds to a valid ballot value (Cramer et al. , page 1 , par. 3 - page 2, 

14 par. 3). 
15 

16 Regarding claim 20, the modification of Cramer et al., discloses: 

17 wherein the validity proof is a non-interactive proof of validity (Cramer et al., page 

18 6-7, sect. 2.4). 
19 

20 Regarding claim 21, it is rejected as being the method of claim 13 embodied in a 

21 computer readable medium. The modification of Cramer et al. discloses an electronic 

22 voting system comprising computers ("nodes") to execute the method of claim 13. It is 
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1 inherent that these computers contain computer readable medium embodying the 

2 method of claim 1 3 so as to accomplish what is disclosed. 
3 

4 Regarding claim 22, it is rejected for the same reasons as claim 13. 

5 

6 Regarding claim 23, the modification of Cramer et al. discloses: 

7 the contents of the computer-readable medium further cause the voting node to 

8 send to the vote collection point a validity proof proving that the encrypted ballot value 

9 corresponds to a valid ballot value (Cramer et al., page 1 , par. 3 - page 2, par. 3). 
10 

1 1 Regarding claim 24, the modification of Cramer et al., discloses: 

1 2 One or more computer memories collectively containing a voter security data 



1 3 structure, the data structure containing one or more secrets usable both (a) to encrypt 

14 an encoded ballot for transmission to a ballot collection point, and (b) to decrypt an 

1 5 encrypted ballot confirmation received from the ballot collection point, which indicates 

1 6 the contents of the ballot as received at the ballot collection point (Cramer et al. , page 1 ; 

17 par. 2 - page 2; page 4-5, section 2.2; page 3, par. 4; page 4, par. 3; ). The 

18 modification of Cramer et al. discloses the processes of encrypting a ballot and 

19 decrypting a vote confirmation using secrets. It is inherent that these secrets be 

20 contained in memory so as to be used when needed for these processes. 
21 

22 Regarding claim 25, the modification of Cramer et al., discloses: 
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1 One or more computer memories collectively containing a ballot data structure, 

2 the ballot data structure comprising: an encrypted ballot choice formed by encrypting 

3 one of a plurality of valid ballot choices selected by a voter in a voter computer system; 

4 a proof of validity that demonstrates that the encrypted ballot choice constitutes an 

5 encryption of one of the plurality of valid ballot choices without indicating which of the 

6 plurality of valid ballot choices the encrypted ballot choice constitutes an encryption of; 

7 and an encrypted ballot confirmation generated in response to the receipt in a ballot 

8 collection center computer system of the encrypted ballot choice and proof of validity 

9 (Cramer et al., page 4, sect. 2.1). The modification of Cramer et al. discloses the use of 

10 a bulletin board (accessible by all participants to the voting system) where all messages 

1 1 of the participants will be posted, including the encrypted ballots, validity proofs, and 

12 vote confirmation. 
13 



14 Regarding claim 26, it is rejected for the same reasons as claim 15. 
15 

16 Regarding claims 27 and 28, they are rejected for the same reasons as claim 25. 
17 

18 Regarding claim 29, the modification of Cramer et al., discloses: 

1 9 receiving an encrypted ballot value from a ballot sending node, the encrypted 



20 ballot value being encrypted from a ballot value based on a voter selection using a 

21 secret not available in the ballot receiving node (Cramer et al., page 3, par. 4; page 5, 
» 

22 par. 5; page 9, par. 4); 
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1 generating from the encrypted ballot value an encrypted secret value 

2 confirmation that indicates to those in possession of the secret used to encrypt the 

3 encrypted ballot value the ballot value to which the received encrypted ballot value 

4 corresponds; and sending the encrypted secret value confirmation to the ballot sending 

5 node, such that the encrypted secret value confirmation may be used in the ballot 

6 sending node to determine if the encrypted ballot value received at the ballot receiving 

7 node corresponds to the ballot selection made by the voter (Cramer et al., page 2, lines 

8 1-21; page 7, par. 1; page 9, pars. 3, 4). 
9 



10 Regarding claim 30, the modification of Cramer et at. discloses: 

1 1 wherein the secret value confirmation is generated without decrypting the 

12 encrypted ballot value (Cramer et al, page 2, lines 1-21; page 14, par. 2, lines 1-9). 
13 

14 Regarding claim 32, the modification of Cramer et al., discloses: 

1 5 wherein the encrypted secret value confirmation is encrypted in such a manner 



1 6 that, in the ballot sending node, given the encrypted secret value confirmation 

1 7 corresponding to a selection other than the voter selection, it is intractable to generate a 

1 8 decrypted secret value confirmation corresponding to the voter selection (Cramer et al., 

19 page 4, sect. 2.2). As disclosed, the election scheme of Cramer et al. prevents 

20 cheating. 
21 
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1 Regarding claim 33, it is the apparatus claim corresponding to the method claim 

2 of 29, and is rejected for the same reasons. Further, the modification of Cramer et al. v 

3 discloses an "authority" system for executing the method of claim 29. An authority that 

4 receives a ballot, generates a confirmation, and sends the confirmation, must contain a 

5 means to receive, generate, and transmit (Cramer et al., page 9, pars. 3,4). 
6 

7 Regarding claim 34, the modification of Cramer et al., discloses: 

8 one or more generated data signals collectively conveying a ballot response data 

9 structure containing an encrypted ballot confirmation generated in response to the 

1 0 receipt at a ballot collection point of a ballot cast by a voter, the encrypted ballot 

1 1 confirmation, when decrypted on behalf of the voter, indicating a voting selection made 

12 by the voter in the cast ballot as received at the ballot collection point (Cramer et al, 

13 page 9, par. 3; page 2, par. 1; page 4, sect. 2.1). As disclosed by the modification of 

14 Cramer et al., the data structures containing the generated ballot confirmation are 

15 posted to the bulletin board. Thus, disclosed are the posts "generated data signals" that 

16 contain the ballot response data structure. 
17 

18 Regarding claim 35, the modification of Cramer et al., discloses: 

1 9 wherein the ballot received at the ballot collection point is encrypted, and wherein 

20 the encrypted ballot confirmation is generated without decrypting the encrypted ballot 

21 (Cramer et al., page 1 , par. 3 - page 2, par. 3; page 9, par. 4; page 14, par. 2, lines 1- 

22 9). 



Application/Control Number: 10/038,752 
Art Unit: 2137 



Page 15 



1 

2 Regarding claim 37, the modification of Cramer et al., discloses: 

3 sending an encrypted ballot from a first computer system to a second computer 

4 system, the encrypted ballot reflecting a ballot choice selected by a voter (Cramer et al. , 

5 page 1 , par. 3 - page 2, par. 3); 

6 sending a confirmation from the second computer system to the first computer 



7 system, the confirmation serving to convey the decrypted contents of the encrypted 

8 ballot as received at the second computer system, the confirmation being generated 

9 without decrypting the encrypted ballot; and in the first computer system, displaying the 

1 0 confirmation, so that the voter can determine whether the decrypted contents of the 

1 1 encrypted ballot as received at the second computer system match the ballot choice 

12 selected by the voter (Cramer et al., page 9, par. 4; page 14, par. 2, lines 1-9; see also 

1 3 rejection of claim 1 3). 
14 



15 Regarding claim 38, the modification of Cramer et al., discloses: 

1 6 wherein the confirmation sent from the second computer system to the first 

1 7 computer system is encrypted in such a manner that its decryption by the second 

18 computer system is infeasible (Cramer et al., page 2, lines 1-25). 
19 

20 Regarding claim 39, the modification of Cramer et al., discloses: 
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1 wherein the confirmation sent from the second computer system to the first 

2 computer system is encrypted in such a manner that its decryption by the second 

3 computer system is impossible (Cramer et al., page 2, lines 1-25). 
4 

5 Regarding claim 40, the modification of Cramer et al., discloses: 

6 sending from the first computer system to the second computer system a validity 



7 proof proving that the encrypted ballot sent from the first computer system to the second 

8 computer system reflects a valid ballot choice without identifying the reflected ballot 

9 choice (Cramer et al., page 2, lines 1-30). 
10 

1 1 Regarding claim 41, the modification of Cramer et al. discloses: 

12 wherein the confirmation is sent from the second computer system to the first 

1 3 computer system only if the validity proof sent from the first computer system to the 

14 second computer reflects a valid ballot choice (Cramer et al, page 14, par. 2, lines 1-9; 

1 5 page 9, pars. 3,4). The modification of Cramer et al. discloses that only valid ballots are 

16 tallied and thus would be included in the confirmation post to the bulletin board. 
17 

18 Regarding claim 42, it is rejected as being the method of claim 37 embodied in a 

19 computer readable medium. The modification of Cramer et al. discloses an electronic 

20 voting system comprising computers to execute the method of claim 37. It is inherent 

21 that these computers contain computer readable medium embodying the method of 

22 claim 37 so as to accomplish what is disclosed. 
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1 

2 Regarding claim 43, it contains substantially the same limitations as claim 40 and 

3 is rejected for the same reasons. 
4 

5 Regarding claim 44, it contains substantially the same limitations as claim 41 and 

6 is rejected for the same reasons. 
7 

8 Regarding claim 45, it contains substantially the same limitations as claim 13 and 

9 is rejected for the same reasons. 
10 

1 1 Regarding claim 46, it contains substantially the same limitations as claims 13 

12 and 21 and is rejected for the same reasons. 
13 

14 Regarding claim 47, the modification of Cramer et al., discloses: 

1 5 receiving the electronic ballot, the electronic ballot containing an encrypted ballot 



1 6 choice; determining that the received encrypted ballot choice is hot accompanied by a 

1 7 valid validity proof that proves that the encrypted ballot choice constitutes the encryption 

18 of one of a plurality of permissible ballot choices; and in response to so determining, 

1 9 determining that the generated first ballot has been compromised (Cramer et al, page 2, 

20 par. 2; page 9, par. 4; page 14, par. 2, lines 1-9). 
21 

22 Regarding claim 48, the modification of Cramer et al., discloses: 
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1 wherein no validity proof is received for the encrypted ballot choice (Cramer et 

2 al., page 12, par. 8). 
3 

4 Regarding claim 49, the modification of Cramer et al., discloses: 

5 wherein a validity proof is received along with the encrypted ballot choice, and 



6 the combination of validity proof and encrypted ballot fail a verification operation 

7 performed by the vote collection computer system, where the verification operation is 

8 constructed explicitly to determine whether the encrypted ballot is an encryption of at 

9 least one of the valid ballot responses (Cramer et al. , page 12-13, sect. 6.1). 
10 

1 1 Regarding claim 50, the modification of Cramer et al., discloses: 

1 2 means for receiving the electronic ballot, the electronic ballot containing an 

1 3 encrypted ballot choice (Cramer et al. , page 2, lines 1 -25); means for determining that 

1 4 the received encrypted ballot choice is not accompanied by a valid validity proof that 

1 5 proves that the encrypted ballot choice constitutes the encryption of one of a plurality of 

16 permissible ballot choices; and means for, in response to so determining, determining 

1 7 that the generated first ballot has been compromised (Cramer et al. , page 2, lines 1 -25; 

18 page 7, par. 4; page 8, fig. 2). The modification of Cramer et al. discloses a means for 

1 9 the verifier or ballot collection system to check and verify the validity of votes so as to 

20 prevent disruption from voters who submit invalid votes (Cramer et al., page 14, par. 2). 
21 

22 
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1 Conclusion 

2 

3 The prior art made of record and not relied upon is considered pertinent to 

4 applicant's disclosure: 
5 

6 Bruce Schneier, Applied Cryptography, Second Edition, 1996, John Wiley & 

7 Sons Inc., pages 476 - 481 , 490-1 , 532-3. 
8 

9 Hall et al., "Voting Method and System", U.S. Pub. 2002/0074399 A1 . 

10 

1 1 Karro et al., "Electronic Voting System", U.S. Pub. 2002/0077885 A1 . 

12 

13 A shortened statutory period for reply is set to expire 3 months (not less than 90 

14 days) from the mailing date of this communication. 

1 5 Any inquiry concerning this communication or earlier communications from the 

16 examiner should be directed to Jeffery Williams whose telephone number is (571) 272- 

17 7965. The examiner can normally be reached on 8:30-5:00. 

18 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

19 supervisor, Andrew Caldwell can be reached on (571) 272-3868. The fax phone 

20 number for the organization where this application or proceeding is assigned is 703- 

21 872-9306. 
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Information regarding the status of an application may be obtained from the 



2 Patent Application Information Retrieval (PAIR) system. Status information for 

3 published applications may be obtained from either Private PAIR or Public PAIR. 

4 Status information for unpublished applications is available through Private PAIR only. 

5 For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

6 you have questions on access to the Private PAIR system, contact the Electronic 

7 Business Center (EBC) at 866-217-9197 (toll-free). 
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